LI
Product
Libvirt
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 22Low 1
Watch
Add Libvirt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-4400 | – | Dec 9 | virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line… Affected: 1.1.2; 1.1.3 |
| CVE-2013-4401 | – | Nov 2 | The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3 |
| CVE-2013-4311 | – | Oct 3 | libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess… Affected: 0.9.12; 0.10.2; 0.10.2.1; 0.10.2.2; 0.10.2.3; 0.10.2.4; +9 more |
| CVE-2013-5651 | – | Sep 30 | The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a… Affected: through 1.1.1; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2013-4297 | – | Sep 30 | The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service (uninitialized pointer… Affected: through 1.1.2; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2013-4296 | – | Sep 30 | The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows… Affected: 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; 0.9.6; +24 more |
| CVE-2013-4292 | – | Sep 30 | libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1)… Affected: 1.1.0; 1.1.1 |
| CVE-2013-4291 | – | Sep 30 | The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which… Affected: 0.10.2.7; 1.0.5.5; 1.1.1 |
| CVE-2013-4239 | – | Sep 30 | The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote authenticated users to cause a denial of service (memory corruption and crash) via… Affected: 1.1.1 |
| CVE-2013-4154 | – | Sep 30 | The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: through 1.1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +2 more |
| CVE-2013-4153 | – | Sep 30 | Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash)… Affected: 1.0.6; 1.1.0 |
| CVE-2013-2230 | – | Sep 30 | The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via unspecified vectors involving… Affected: through 1.1.0; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2013-2218 | – | Sep 30 | Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service… Affected: 1.0.6 |
| CVE-2013-1962 | – | May 29 | The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor… Affected: 1.0.5 |
| CVE-2013-1766 | – | Mar 20 | libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors Affected: through 1.0.2; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2013-0170 | – | Feb 8 | Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6… Affected: 0.9.6 before 0.9.6.4; 0.9.11 before 0.9.11.9; 0.10.2 before 0.10.2.3; 1.0.0 before 1.0.2 |
| CVE-2012-4423 | – | Nov 19 | The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an… Affected: through 0.10.1; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2012-3445 | – | Aug 7 | The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to… Affected: 0.9.13 |
| CVE-2012-2693 | – | Jun 17 | libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong… Affected: through 0.9.11; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2011-2511 | – | Aug 10 | Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted… Affected: through 0.9.2; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2011-2178 | – | Aug 10 | The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect… Affected: 0.8.8; 0.9.0; 0.9.1 |
| CVE-2011-1486 | – | May 31 | libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report… Affected: through 0.8.8; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2011-1146 | – | Mar 15 | libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS… Affected: 0.8.8 |